The cybersecurity industry doesn't have a password awareness problem. It has a password dependency problem. October is Cybersecurity Awareness Month, and a new Forbes article highlights a troubling reality: even cybersecurity professionals are still relying on passwords in an era of increasingly sophisticated AI-driven phishing attacks. 🔹 Nearly half of security professionals still use passwords to access work accounts. 🔹 70% reported an increase in phishing attacks over the past year. 🔹 44% experienced AI-driven phishing attacks. The findings reinforce something we've been saying at KZero Passwordless: AI has fundamentally changed phishing, but we're still defending against it with outdated approaches. AI-generated phishing emails no longer need spelling mistakes, suspicious formatting, or obvious red flags. They're convincing, personalized, and increasingly difficult to distinguish from legitimate communications. And yet, we're still asking employees to recognize them. But there's another problem that deserves more attention: legacy applications. Organizations don't continue using passwords simply because employees are comfortable with them. Many business-critical applications still don't support modern passwordless standards. That's a technology problem, not a human problem. At KZero Passwordless, we believe the transition to phishing-resistant logins must account for the entire application environment, not just applications that already support passkeys. That means combining FIDO2 passkeys, biometric security, and secure credential management for legacy applications that aren't ready to go passwordless. This Cybersecurity Awareness Month, let's move the conversation beyond teaching employees to recognize increasingly sophisticated phishing attacks. It's time to remove the credentials those attacks are designed to steal. 📖 Read the full Forbes article: forbes.com/sites/timkeary/20… #CybersecurityAwarenessMonth #Passwordless #Cybersecurity #Passkeys #PhishingResistance #AIPhishing #ManagedServices

Have you heard of AI "Slop Squatting"? This article from IEEE Spectrum highlights a troubling new phishing tactic. Criminals are registering plausible domains that AI tools hallucinate, turning AI-generated recommendations into pathways to malicious websites. Add the rise of AI-powered phishing campaigns, and “think before you click” faces growing pressure. For MSPs, the stakes extend across every client environment they manage. A compromised privileged account can put multiple organizations at risk. Moving toward passwordless, phishing-resistant authentication needs to be a priority. Passkeys bind authentication to the legitimate service, preventing a lookalike website from capturing a reusable password. That protection reduces dependence on users spotting every convincing fake. For MSPs and their clients, the next steps are clear: 🔐 Prioritize privileged and administrative accounts. 🔐 Extend phishing-resistant authentication across client environments. 🔐 Strengthen enrollment and account recovery so they don’t become the weak link. At KZero Passwordless, we believe secure access should be simple for users and difficult for attackers to exploit. As phishing evolves, authentication needs to evolve with it. MSPs: where does phishing-resistant authentication sit on your client security roadmap? 🔗: spectrum.ieee.org/ai-cyberat… #KZero #Passwordless #PhishingResistant #MSP #Cybersecurity

AI is great at many things but generating secure passwords isn't one of them. A recent @PCMag article highlights an important misconception: when you ask an AI assistant to create a "random" password, you're not getting true randomness. You're getting a prediction based on patterns the model has learned. That means passwords that look random may actually be more predictable than they seem. The lesson isn't to avoid AI. It's to use the right tool for the job. For legacy applications that still require passwords, credentials should be generated using a cryptographically secure random number generator, not a language model. They should also be stored and filled securely, without relying on users to memorize or manage them. That's exactly why KZero includes: 🔐 A biometric password manager for legacy applications that don't yet support passkeys. 🎲 A cryptographically secure random password generator that creates strong, unique credentials with a single click. 🔑 A passwordless experience wherever passkeys and modern authentication are supported. Passwordless is the future. But until every application gets there, legacy passwords deserve modern protection too. 🔗: ca.pcmag.com/password-manage… #CyberSecurity #Passwordless #Passkeys #PasswordManager #IdentitySecurity #Phishing #Biometrics #MSP #MSSP #FIDO2

We're excited to be exhibiting at CanITCon 2026! If you're attending, stop by Booth 312 to see how KZero is enabling organizations to eliminate one of cybersecurity's biggest risks: phishable credentials. Whether you're an MSP, IT leader, or security professional, we'd love to meet you, hear about your challenges, and show you how we help businesses of all sizes defend against the latest surge of AI-driven phishing campaigns. 🔵 Booth 312 📅 September 9–11 📍 TELUS Convention Centre See you in Calgary! #CanITCon #CyberSecurity #Passwordless #Passkeys #IdentitySecurity #MSP #MSSP #ZeroTrust #ITSecurity #CyberDefense

Thank you to everyone who attended our session at ASCII Edge Toronto this week. The conversations throughout the event reinforced something we've believed for a long time. AI isn't just making phishing cheaper and more frequent. It's making it dramatically more convincing. When attackers can clone voices, personalize emails, and create pixel-perfect login pages in seconds, training users and asking them to "be more careful" is no longer a security strategy. The answer isn't better passwords. It's eliminating the secrets that phishing is designed to steal. A huge thank you to The ASCII Group, the event organizers, and the incredible MSP community for the thoughtful discussions, challenging questions, and warm welcome. Congratulations to all the other presenters and award recipients as well. We're excited to continue helping MSPs deliver phishing-resistant security that protects their customers today and prepares them for what's next. See you at the next ASCII Edge! #ASCIIEdge #MSP #MSSP #CyberSecurity #Passwordless #Passkeys #IdentitySecurity #PhishingResistance #Channel #ITChannel #ZeroTrust

The latest phishing toolkit isn't defeating passkeys. It's exploiting what happens after a successful account takeover. securityweek.com/new-phishin… #Passkeys #CyberSecurity #MSP #IdentityManagement #Passwordless

Security only works when people actually use it. We believe a stronger security posture shouldn’t come at the expense of the user experience. That’s why UX isn’t an afterthought, it’s as fundamental to our product as security itself #Passwordles #MSP #UX #ProductDesign

What a week in San Diego! Thank you to @GTIAofficial and to everyone who connected with our team. We’re excited to keep the conversations (and the momentum) going. #ChannelCon2026 #WeAreGTIA #KZeroPasswordless #Passwordless #MSP #MSSP #Cybersecurity #PhishingResistantMFA

Passkey cryptography didn’t break. The sync layer did. New “Pass-ta-key” research highlights why MSPs must secure endpoints, monitor re-enrollment and use device-bound credentials for privileged accounts. kzero.com/blog/pass-ta-key-p… #Passkeys #Cybersecurity

Great week at #XChangeSecurity! Thanks to all the MSPs who stopped by the KZero Passwordless booth and joined our Family Feud-style boardroom session. The conversations around AI-driven phishing, passwordless authentication, and the future of identity security were outstanding.

Password managers helped, but the master password is still a weak link: one memorized secret protecting everything. As the market moves toward passwordless, biometrics offer a safer bridge for legacy apps that still depend on credentials. everythingmsp.com/article/th… #MSP #Password

24 billion credential records exposed. According to @Cybernews, the exposed database included usernames, emails, plaintext passwords, login URLs, and infostealer logs. This is why password reuse remains such a major risk. Read more: cybernews.com/security/24-bi… #Passwordless #MSP

Apple’s reported iOS 27 AI password changing feature shows where password management is headed. AI can reduce friction, but businesses still need control. Article 🔗: pocket-lint.com/ios-27-autom…

At KZero, we believe organizations need to move beyond simply storing passwords more securely. The next step is reducing the role of passwords altogether through passwordless-first authentication engadget.com/2186075/dashlan… #Passwordless #Cybersecurity #MSP #MSSP #IdentitySecurity

K–12 may not go fully passwordless overnight, but the districts that start planning now will be in a much stronger position tomorrow. For MSPs, this is the moment to lead that conversation. 🔗: lnkd.in/g6Bfbvt7 #Passwordless #MSP #MSSP #K12Cybersecurity #EdTech

In other words, deploying passkeys is not the same thing as becoming passwordless. ca.pcmag.com/it-security/155… #passwordless #FIDO2 #passwords #IAM #MSP #MSSP

Passwords are not just a user problem. They are an architecture problem. The takeaway is simple: Browsers are for browsing. Identity security deserves purpose-built protection. Read the full article here: mashable.com/article/microso… #Passwordless

Chicago MSPs, we’ll see you at ChannelPro DEFEND. We’re looking forward to meeting MSP leaders, security-focused partners, and channel professionals who are ready to make authentication simpler, stronger, & more scalable. #MSP #MSSP #Cybersecurity #Passwordless #Authentication

howtogeek.com/please-stop-us… Browser-based password managers may be convenient, but convenience should never be mistaken for security. Storing credentials inside the browser can create unnecessary risk & reinforce continued dependence on passwords. #passwords #passkeys #IAM #MSP

In this latest article with @everything_msp , we break down 5 signs your client is already ready for passwordless, even if they do not know it yet. 🔗: everythingmsp.com/article/5-… #MSP #Cybersecurity #Passwordless #PhishingResistant #MFA #IAM #Passwords #MSSP